[Savannah-hackers] [support #103392] ssh public key not recognized

[Miguel V. S. Frasson]

This mail is an automated notification from the support tracker
 of the project: Savannah Administration.

/**************************************************************************/
[support #103392] Latest Modifications:

Changes by: 
                Miguel V. S. Frasson <address@hidden>
'Date: 
                Mon 10/18/2004 at 08:16 (Europe/Amsterdam)

------------------ Additional Follow-up Comments ----------------------------
Hi.  I did't change keys anymore.  Today I will change a key to see if it is 
working.  I will comment the results here.






/**************************************************************************/
[support #103392] Full Item Snapshot:

URL: <http://savannah.gnu.org/support/?func=detailitem&item_id=103392>
Project: Savannah Administration
Submitted by: Miguel V. S. Frasson
On: Fri 09/24/2004 at 12:08

Category:  Developer CVS
Priority:  5 - Normal
Severity:  3 - Ordinary
Resolution:  None
Privacy:  Public
Assigned to:  mjflick
Originator Email:  address@hidden
Status:  Open


Summary:  ssh public key not recognized

Original Submission:  Hi

I have applied a ssh dsa key to savannah, but I have not get grant to checkout 
the cvs repository of a project that I am contributor. My username is frasson, 
and I am member of auctex.

When I try the checkout with command 
  cvs -z3 address@hidden:/cvsroot/auctex co auctex
I am asked about the password, not the passphrase.  (Of course giving the 
passphrase as password does not work.)

I am sure that I have generated correctly a ssh dsa key with protocol version 
2.  I am sure that the text that is in the key #1 edit on my account 
configuration is such public key.  I use the same key in a 
~/.ssh/authorized_keys that I have in other machines without problem.

There are 3 days that I don't access the cvs (that is, since I registered in 
savannah).

If I try to connect via ssh to subversions.gnu.org with command 
  ssh -v -v -v address@hidden, I get the following output.

[~] > ssh -v -v -v address@hidden
OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090701f
debug1: Reading configuration data /home/frasson/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug2: ssh_connect: needpriv 0
debug1: Connecting to subversions.gnu.org [199.232.41.3] port 22.
debug1: Connection established.
debug1: identity file /home/frasson/.ssh/id_rsa type -1
debug3: Not a RSA1 key file /home/frasson/.ssh/id_dsa.
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug3: key_read: missing keytype
debug2: key_type_from_name: unknown key type 'Proc-Type:'
debug3: key_read: missing keytype
debug2: key_type_from_name: unknown key type 'DEK-Info:'
debug3: key_read: missing keytype
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug2: key_type_from_name: unknown key type '-----END'
debug3: key_read: missing keytype
debug1: identity file /home/frasson/.ssh/id_dsa type 2
debug1: Remote protocol version 2.0, remote software version OpenSSH_3.4p1 
Debian 1:3.4p1-1.woody.3.1
debug1: match: OpenSSH_3.4p1 Debian 1:3.4p1-1.woody.3.1 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.6.1p2
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: 
diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,address@hidden
debug2: kex_parse_kexinit: 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,address@hidden
debug2: kex_parse_kexinit: 
hmac-md5,hmac-sha1,hmac-ripemd160,address@hidden,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: 
hmac-md5,hmac-sha1,hmac-ripemd160,address@hidden,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: first_kex_follows 0 
debug2: kex_parse_kexinit: reserved 0 
debug2: kex_parse_kexinit: 
diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,address@hidden
debug2: kex_parse_kexinit: 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,address@hidden
debug2: kex_parse_kexinit: 
hmac-md5,hmac-sha1,hmac-ripemd160,address@hidden,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: 
hmac-md5,hmac-sha1,hmac-ripemd160,address@hidden,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: first_kex_follows 0 
debug2: kex_parse_kexinit: reserved 0 
debug2: mac_init: found hmac-md5
debug1: kex: server->client aes128-cbc hmac-md5 none
debug2: mac_init: found hmac-md5
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug2: dh_gen_key: priv key bits set: 121/256
debug2: bits set: 1618/3191
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug3: check_host_in_hostfile: filename /home/frasson/.ssh/known_hosts
debug3: check_host_in_hostfile: match line 2
debug3: check_host_in_hostfile: filename /home/frasson/.ssh/known_hosts
debug3: check_host_in_hostfile: match line 1
debug1: Host 'subversions.gnu.org' is known and matches the RSA host key.
debug1: Found key in /home/frasson/.ssh/known_hosts:2
debug2: bits set: 1634/3191
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: 
publickey,password,keyboard-interactive
debug3: start over, passed a different list 
publickey,password,keyboard-interactive
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug2: userauth_pubkey_agent: no keys at all
debug2: userauth_pubkey_agent: no more keys
debug2: userauth_pubkey_agent: no message sent
debug1: Trying private key: /home/frasson/.ssh/id_rsa
debug3: no such identity: /home/frasson/.ssh/id_rsa
debug1: Offering public key: /home/frasson/.ssh/id_dsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: 
publickey,password,keyboard-interactive
debug2: userauth_pubkey_agent: no more keys
debug2: userauth_pubkey_agent: no message sent
debug2: we did not send a packet, disable method
debug3: authmethod_lookup keyboard-interactive
debug3: remaining preferred: password
debug3: authmethod_is_enabled keyboard-interactive
debug1: Next authentication method: keyboard-interactive
debug2: userauth_kbdint
debug2: we sent a keyboard-interactive packet, wait for reply
debug1: Authentications that can continue: 
publickey,password,keyboard-interactive
debug3: userauth_kbdint: disable: no info_req_seen
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred: 
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
address@hidden's password: 

[~] >

Thanks for any help.

Miguel.


Follow-up Comments
------------------


-------------------------------------------------------
Date: Mon 10/18/2004 at 08:16       By: Miguel V. S. Frasson <frasson>
Hi.  I did't change keys anymore.  Today I will change a key to see if it is 
working.  I will comment the results here.

-------------------------------------------------------
Date: Sun 10/17/2004 at 18:12       By: Michael J. Flickinger <mjflick>
There should be no problem with ssh keys and the web interface, currently.

Are you still having any trouble?

-------------------------------------------------------
Date: Mon 09/27/2004 at 15:27       By: Miguel V. S. Frasson <frasson>
Hi.

It was working (I replied e-mail but apparently it didn't get here).

However, I changed some keys and it stop work again.  Is there problem with the 
web interface on the ssh keys?  I mean, once it is fixed should I avoid change 
the keys, because they could stop work?

-------------------------------------------------------
Date: Sun 09/26/2004 at 17:35       By: Michael J. Flickinger <mjflick>
(that should say, "Let me know whether it works or not.")

-------------------------------------------------------
Date: Sun 09/26/2004 at 17:31       By: Michael J. Flickinger <mjflick>
This should be working now.

Let me whether it works or not.












For detailed info, follow this link:
<http://savannah.gnu.org/support/?func=detailitem&item_id=103392>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/